CVE-2022-37989

CSRSS Elevation of Privilege (CVE-2022-37989) is a Windows local privilege escalation vulnerability in the Client Server Run-time Subsystem. The issue permits a local attacker to elevate privileges (to SYSTEM) on vulnerable Windows versions. Public details describe CSRSS as the Windows user-mode ...

CVE-2026-33827

CVE-2026-33827 is a Windows TCP/IP race-condition vulnerability in the IPv6/IPSec processing path (tcpip.sys) that enables remote code execution. Exploitation described in connected docs requires sending crafted IPv6 packets (with IPSec) to Windows hosts with IPSec enabled; no authentication or u...

CVE-2019-0972

CVE-2019-0972 affects the Local Security Authority Subsystem Service (LSASS) where an authenticated attacker can trigger a denial of service by sending specially crafted authentication requests. Exploitation could cause the LSASS service to reboot the target system. Microsoft’s security update mi...

CVE-2019-1346

Technical details for CVE-2019-1346 are not provided in the connected documents. The materials reference a Windows memory-handling DoS but do not specify affected components, versions, impact, or remediation. Monitor for updates.

CVE-2022-24498

CVE-2022-24498 is a Windows iSCSI Target Service Information Disclosure vulnerability. The available data show that it affects the Windows iSCSI Target Service and has a CVSS v3.1 base score of 6.5 (Network, Low attack complexity, Low privileges required, No user interaction, Confidentiality impa...

CVE-2022-34731

CVE-2022-34731 affects the Microsoft WDAC OLE DB provider for SQL Server and is categorized as a Remote Code Execution vulnerability. The CVSS v3.1 base score is 8.8 (HIGH) with network attack vector, no privileges required, but user interaction required. The connected documents identify the affe...

CVE-2022-38004

Technical details about CVE-2022-38004 are not publicly available in the provided documents; the connected records reference Windows Fax Service and a remote code execution vulnerability but do not disclose affected versions, root cause, exploit info, or fixes. Monitor for updates.

CVE-2022-44678

Technical details for CVE-2022-44678 are not provided in the connected documents. No product/version/impact/fix details are present here. Monitor for official disclosures and vendor advisories for updates.

CVE-2023-28255

CVE-2023-28255 is a Windows DNS Server Remote Code Execution vulnerability. The CVSS metrics indicate a network-based attack that requires high privileges and no user interaction, with high impact to confidentiality, integrity, and availability. Connected sources confirm DNS-related updates were ...

CVE-2023-35383

Technical details (affected component, root cause, affected versions, impact, or fixes) for CVE-2023-35383 are not provided in the supplied documents. Monitor for updates from official sources.

CVE-2024-30000

CVE-2024-30000 affects Windows Mobile Broadband Driver and enables remote code execution (Execution of random code) with a base CVSS around 6.8 (AV: Physical, AC: Low, PR: None, UI: None, C/I/A: High). Connected guidance indicates Microsoft has updates available; applying the May 2024 Windows upd...

CVE-2024-30032

CVE-2024-30032 affects Windows DWM Core Library. The vulnerability enables local elevation of privilege with vector LOCAL, requiring LOW privileges and no user interaction; impact is elevated privileges potentially up to SYSTEM, with confidentiality/integrity/availability rated HIGH. The CVE is l...

CVE-2024-30071

Technical details for CVE-2024-30071 are not provided in the connected documents. The Initial entry mentions Windows Remote Access Connection Manager information disclosure but lacks specific affected products/versions, root cause, impact, or remediation in the supplied materials. Monitor for upd...

CVE-2024-49089

Technical details about CVE-2024-49089 are not provided in the supplied documents; RRAS RCE is referenced but no affected versions, exploit, or remediation details are included. Monitor for updates.

CVE-2025-21270

CVE-2025-21270 affects Microsoft Message Queuing (MSMQ) and is a Denial of Service vulnerability. Public data show an attack over the network with no authentication required, low attack complexity, and a high impact on availability (CVSS v3.1: 7.5). The connected documents indicate MSMQ-related e...

CVE-2025-21312

CVE-2025-21312 is described as a Windows Smart Card Reader Information Disclosure vulnerability. The core technical details available across connected sources are limited to the CVE label, a CVSSv3.1 base score of 2.4 (PHYSICAL attack, low impact on confidentiality, no impact on integrity/availab...

CVE-2025-21324

Technical details about CVE-2025-21324 are not publicly provided in the supplied connected documents. Public advisories mention Windows updates addressing kernel-related issues but do not provide CVE-specific exploit vectors, impacted products, or fixes in these sources. Monitor for updates.

CVE-2025-24048

CVE-2025-24048 is a heap-based buffer overflow in the Windows Hyper-V role that enables a locally authenticated attacker to elevate privileges. Public records confirm this is associated with Windows Hyper-V and is rated high severity with local exploitability and total impact to confidentiality, ...

CVE-2025-27481

CVE-2025-27481 describes a stack-based buffer overflow in Windows Telephony Service that could allow a remote attacker to execute code over the network. The vulnerability affects the Windows Telephony Service component and is caused by a stack overflow in handling network input, with publicly pro...

CVE-2025-27730

CVE-2025-27730 is a local privilege escalation in Windows Digital Media caused by a use-after-free. Authorized attackers can elevate privileges on affected Windows builds. Public vulnerability records confirm the issue and Microsoft has released security updates to fix it (e.g., KB5055527/KB50555...

CVE-2026-59134

The CVE-2026-59134 entry concerns a heap-based buffer overflow in the Remote Desktop Client that enables remote code execution and requires network access (attack vector: NETWORK) with user interaction. The documented impact is high (CVSS 3.1: AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H). No explicit rem...

CVE-2018-8333

CVE-2018-8333 is a local Elevation of Privilege in Windows Filter Manager caused by improper handling of memory objects. Affected: Windows 7, Windows 8.1, Windows 10 and various Windows Server editions listed in the CVE entry. Root cause is mismanagement of in-memory objects within Filter Manager...

CVE-2018-8489

The CVE-2018-8489 entry describes a Windows Hyper-V remote code execution vulnerability. The root cause is that Hyper-V on a host server fails to properly validate input from an authenticated user on a guest OS, allowing arbitrary code execution on the host. Affected platforms include multiple Wi...

CVE-2019-0711

The CVE-2019-0711 vulnerability affects Microsoft Hyper-V and involves denial-of-service when a host server fails to properly validate input from a privileged guest OS user. An attacker with a privileged guest account can run a crafted application inside a VM to crash the host. The vulnerability ...

CVE-2019-0715

The CVE-2019-0715 entry affects Microsoft Hyper-V Network Switch and is described as a denial-of-service vulnerability. A privileged attacker on a guest OS can run a crafted application to crash the host server, indicating that input validation in the Hyper-V Network Switch path is inadequate. Th...

CVE-2019-1028

Technical details (affected products, versions, root cause, exploit vectors, and fixes) are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2019-1156

The CVE-2019-1156 entry concerns the Windows Jet Database Engine. It describes a remote code execution vulnerability caused by improper handling of memory objects, permitting an attacker to execute arbitrary code on a victim system. Exploitation involves enticing a user to open a specially crafte...

CVE-2019-1170

CVE-2019-1170 is a Windows NTFS sandbox-elevation-of-privilege vulnerability. It arises when sandboxed processes create reparse points, enabling a sandbox escape and privilege escalation on the affected system. Public exploit activity exists (e.g., exploit-db). The issue is rooted in the NTFS san...

CVE-2019-1180

The CVE-2019-1180 entry describes an elevation-of-privilege vulnerability in how wcmsvc.dll handles objects in memory. A locally authenticated attacker could run a crafted application to execute code with elevated permissions. The vulnerability is addressed by a security update that ensures wcmsv...

CVE-2019-1393

Technical details about CVE-2019-1393 are not provided in the connected documents. The EUVD entries mention malware 'sbrugna' but do not specify affected products, root cause, impact, or fixes. Monitor for updates.

CVE-2020-0769

CVE-2020-0769 is an Elevation of Privilege vulnerability affecting the Windows CSC Service, arising from memory handling issues in the service. The CVE entry notes that exploitation requires initial code execution on the victim system, allowing an attacker to elevate privileges within the system....

CVE-2020-1011

CVE-2020-1011: Elevation of Privilege in Windows System Assessment Tool due to improper handling of file operations. Affected: Windows System Assessment Tool; root cause: file handling flaw enabling local privilege escalation. CVSS v3.1 shows HIGH impact (base 7.8) with Local attack vector, Privi...

CVE-2020-1234

CVE-2020-1234 is described in the CNVD-2021-31216 entry as a Windows Error Reporting elevation of privilege vulnerability that arises from improper handling of memory objects, enabling an attacker to gain elevated privileges by running a specially crafted application. The initial document also no...

CVE-2020-1527

CVE-2020-1527 – Windows Custom Protocol Engine Elevation of Privilege Root cause: The vulnerability stems from the Windows Custom Protocol Engine improperly handling memory, enabling an attacker who already has code execution on the victim system to run a crafted application and gain higher privi...

CVE-2021-24102

CVE-2021-24102 is a Windows vulnerability described as a local elevation of privilege in Windows Event Tracing. The connected NVD entry lists a CVSS-3.1 base score of 7.8 with local attack vector, low attack complexity, and privileges required as Low, with no user interaction. The impact is high ...

CVE-2021-27096

CVE-2021-27096 refers to an NTFS elevation-of-privilege weakness in Microsoft Windows/Windows Server. The CNVD entry confirms an NTFS vulnerability that could allow privilege escalation, but the provided documents do not disclose the exact root cause, affected builds, or a specific fix. NVD/Secur...

CVE-2021-28447

CVE-2021-28447 is described in the provided documents as a Windows vulnerability affecting the Early Launch Antimalware Driver, characterized as a security feature bypass. The NVD entry lists a CVSS-3.1 base score of 4.4 (local, low attack complexity, high privileges required, no user interaction...

CVE-2021-33744

Technical details for CVE-2021-33744 are not publicly available in the provided documents. No affected products, root cause, or remediation are specified here. Monitor for updates from official advisories.

CVE-2021-33773

CVE-2021-33773 affects the Windows Remote Access Connection Manager in Windows/Windows Server, described as an Elevation of Privilege vulnerability. Connected sources confirm the affected component and privilege/escalation nature, with CVSS indicating high impact (local, with high confidentiality...

CVE-2022-22711

Technical details about CVE-2022-22711 are not provided in the supplied documents; no affected product/version or exploit information is disclosed. Monitor for updates from official sources.

CVE-2022-35770

CVE-2022-35770 is a Windows NTLM spoofing vulnerability. The connected records classify it under Windows NTLM with an impact described as “Pretend to be another user” and a CVSS v3.1 base score of 6.5 (Network attack, Low attack complexity, No privileges required, User interaction required; Confi...

CVE-2022-37982

CVE-2022-37982 relates to the Microsoft WDAC OLE DB provider for SQL Server, with a Remote Code Execution vulnerability. Connected documents identify the affected component as the WDAC OLE DB provider for SQL and indicate an impact of executing arbitrary code, consistent with a high-severity netw...

CVE-2022-37999

CVE-2022-37999 is a Windows Group Policy Preference Client privilege-elevation vulnerability. The CNVD entry describes it as an elevation of privilege in the Windows Group Policy Preference Client stemming from improper privilege assignment, enabling a local attacker with LOW privileges (LOCAL, L...

CVE-2023-21811

Technical details for CVE-2023-21811 are not publicly provided in the supplied documents. No affected products, root cause, or remediation are specified here. Monitor for updates from the connected sources.

CVE-2023-29367

Technical details for CVE-2023-29367 are not publicly provided in the connected documents you supplied. Monitor for updates.

CVE-2023-35297

CVE-2023-35297 is the Windows Pragmatic General Multicast (PGM) Remote Code Execution vulnerability. The connected Vulristics/AVLEONOV content notes this CVE as having public exploit activity and exposure on the same-network-segment (PGM) with a network attack vector and high impact. Specific aff...

CVE-2023-35300

Technical details for CVE-2023-35300 are not provided in the supplied documents; no affected product/version/impact is specified here. Monitor for updates in connected sources.

CVE-2024-30035

CVE-2024-30035 impacts the Windows DWM Core Library and is an Elevation of Privilege vulnerability. Documents identify the affected component (DWM Core Library) and the impact as Obtaining elevated privileges. The CVE is listed among Windows vulnerabilities fixed by Microsoft updates; remediation...

CVE-2024-37983

Technical details (affected products, vulnerable components, root cause, exploit specifics) are not provided in the connected documents. The CVE entry references a Windows EFI security feature bypass; monitor official disclosures and updates for concrete information.

CVE-2024-38062

Affected software: Windows Kernel-Mode Drivers. CVE-2024-38062 is described in the OpenVAS entries as a local privilege escalation vulnerability with an impact of obtaining elevated privileges (CVSS 7.80). Root cause is not detailed in the provided documents beyond the general kernel-mode driver ...